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REMARKS 

This is in response to the Final Office Action of June 1 6, 2004. Entry of this Amendment is respectfully 
requested. With the entry of this Amendment, each of the four independent claims 25, 38, 54, and 69 have 
been amended. No claims have been cancelled. Thus, claims 25-32, 34, 37-45, 47, 49, 54, 59, 69-71 , 73-75, 
and 85-89 are pending. Reconsideration of the Office Action is respectfully requested. 

A Petition for a two-month extension of time to file this Amendment is attached. 

The primary rejection resides in a combination of references. Specifically, the Examiner has rejected 
the claims over the core combination of the Boyle et al. U.S. Patent No. 5,577,209 in view of Garfinkel et al., 
Practical UNIX Security ("Garfinkel"). The critical paragraph of the Official Action that must be addressed is 
H12, where the Examiner acknowledges that Boyle does not disclose that the network security controller 
generates a plurality of user profiles for a single user, wherein a single user selects a profile from the plurality 
of user profiles to access the restricted designations. However, the Examiner states that this feature is 
commonly integrated into systems that maintain discretionary and mandatory access controls on its users, 
citing Garfinkel which discloses a UNIX system. Reconsideration is respectfully requested. 

The Garfinkel UNIX system provides for multiple user identities, but does not permit a single "user" 
identity to have multiple privileges that can be selected by the "user 1 '. It does not enable a single user identity 
to access multiple destinations. The Garfinkel system only provides for different identities, Le., different 
"users". By contrast, in the present system, a single user, i.e., a single identity, can have multiple profiles. This 
enables a single user to select different virtual private networks that are permitted. The present invention 
provides for allowing a user, i.e., a single identity, to have multiple permissions to different network 
objects/domains. Nothing in Garfinkel would suggest this and any combination with Boyle is not suggested by 
the Garfinkel reference. 

In Garfinkel, a person can be provided with multiple identities that are in no way connected. This is 
nothing other than creating multiple "users" for a single person. Of course, the network administrator can 
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change the permissions for each identity. This static profile administrator base does not relate to the concept 
of user selectability from a single identity. 

In the present invention, the user, i.e., a single user identity, is provided with different user profiles 
which define different destinations. The user profiles are those that have a specific meaning, i.e., to enable 
access to specific destinations. The UNIX system in Garfinkel is a single system. It does not enable or can be 
used with systems that create virtual private networks. 

Thus, this application is now in condition for allowance. Should the Examiner have any questions after 
reviewing the Amendment, the Examiner is cordially invited to telephone the undersigned attorneys. 



Respectfully submitted, 



JACOBSON HOLMAN PLLC 
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